When I add a Trusted User, does that user only have read-only access to my installation?
The trusted user has read only access.
The will only be have ability to view the information you have chosen to hide such as consumption, extended and export data.